Zafo Tutor
Zafo Tutor
Zafo Tutor
Zafo Tutor
Zafo Tutor
This explains what Zafo Tutor needs to store so the app can remember your courses, credits, study progress, profile, and account security.
Effective September 24, 2026
We use your name and email address to show your profile, connect your courses to you, and keep credits and progress under the right account.
The app may store your study prompts, uploaded material details, generated notes, Q&A, flashcards, quizzes, progress, and recent activity so you can restudy later.
When you upload a PDF, Zafo Tutor may read and process the file to extract text for study generation. We use file size and page limits to reduce abuse and billing risk. Depending on the feature and hosting environment, uploaded file content may be temporarily processed in memory or request storage and generated study outputs may be saved to your account so you can review them later.
To generate notes, quizzes, flashcards, and Q&A, Zafo Tutor may send your prompts, extracted PDF text, and related study instructions to third-party AI providers. These providers process the content so the app can produce study material. Do not upload sensitive personal, medical, financial, legal, or confidential school/work documents unless you are comfortable with this processing.
Zafo Tutor is designed to use commercial AI APIs for generation. Where provider settings or contracts allow, we aim to use options that prevent user prompts, uploaded files, and generated study content from being used to train public foundation models. Provider policies can change, so we review this as part of launch and vendor setup.
Your password is protected by our sign-in provider. Zafo Tutor does not store or show your raw password.
When you upgrade or buy credits, the app stores the information needed to update your credit balance, subscription status, and payment-related account state.
Card details are handled by secure third-party payment providers such as Stripe. Zafo Tutor does not store raw credit card numbers, CVV codes, Apple Pay payment credentials, or Google Pay payment credentials in its database. We store payment status, transaction references, credit pack details, and information needed to add credits to your account.
Zafo Tutor does not store your raw IP address in its own user database. Our authentication, payment, hosting, and security providers may process IP address, device, browser, approximate location, and login security information to protect accounts, prevent fraud, detect abuse, and keep payments reliable.
We may use country or region-level information for payment availability, fraud prevention, and aggregate admin analytics. We try to use broad location data rather than exact location whenever possible.
Zafo Tutor uses trusted providers such as Clerk for sign-in, Stripe for payments, hosting providers for app delivery, Resend for support email, and AI providers for generating study material. These providers may process data needed to deliver their part of the service.
Contact messages are used to respond to your requests and improve the app experience.
You can delete your account and personal data through Profile > Account > Delete account. If you cannot sign in, use our public account deletion request page. Depending on your location, including GDPR, CCPA, or KVKK regions, you may have rights to access, correct, delete, or receive a copy of certain personal data. We may retain anonymized or limited records where needed for legal, tax, fraud prevention, payment dispute, or security reasons.
To reduce spam, protect AI usage, and prevent payment abuse, the app may temporarily use your IP address in server memory for rate limiting. This is not saved to the Zafo Tutor database and is only used to slow repeated requests.
If a rights holder contacts us about copyrighted material, we may review the report, restrict access, remove affected content, or suspend accounts where appropriate. Copyright notices can be sent through support with enough detail for us to identify the material and the rights holder.
Zafo Tutor provides a public request form for account deletion and privacy-related account requests.
Open account deletion page